This file contains ambiguous Unicode characters that may be confused with others in your current locale. If your use case is intentional and legitimate, you can safely ignore this warning. Use the Escape button to highlight these characters.
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
<glsaid="201611-01">
<title>UnZip: Multiple vulnerabilities</title>
<synopsis>Multiple vulnerabilities have been found in UnZip allowing remote
attackers to execute arbitrary code and cause Denial of Service.
</synopsis>
<producttype="ebuild"/>
<announced>2016-11-01</announced>
<revisedcount="1">2016-11-01</revised>
<bug>528082</bug>
<bug>533748</bug>
<bug>537424</bug>
<bug>560416</bug>
<access>remote</access>
<affected>
<packagename="app-arch/unzip"auto="yes"arch="*">
<unaffectedrange="ge">6.0_p20</unaffected>
<vulnerablerange="lt">6.0_p20</vulnerable>
</package>
</affected>
<background>
<p>Info-ZIP’s UnZip is a tool to list and extract files inside PKZIP
compressed files.
</p>
</background>
<description>
<p>Multiple vulnerabilities were found in UnZip. Please review the
referenced CVE’s for additional information.
</p>
</description>
<impacttype="normal">
<p>Remote attackers could execute arbitrary code or cause Denial of
Service.
</p>
</impact>
<workaround>
<p>There is no known workaround at this time.</p>
</workaround>
<resolution>
<p>All UnZip users should upgrade to the latest version:</p>